Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: 5e835gehyy5xljC6G7264hEpztSzkFYlVJkH58qoyCI=
Subject key identifier: 9B:76:5F:83:C8:41:50:E3:F8:37:2D:2C:A6:96:60:D6:1A:58:56:FA
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019D38665D38B3AE3AFDAAC3FACFF71C2FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: TSiPtw01ckcQsKG+f13ycsqpcpNTQ4rFk8a6vlLBi5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5d:38:b3:ae:3a:fd:aa:c3:fa:cf:f7:1c:2f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=9b765f83c84150e3f8372d2ca69660d61a5856fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:80:23:29:68:6f:48:28:d0:1a:77:20:0e:
3c:7a:2d:b8:75:ab:d6:4e:52:13:cc:b4:c2:36:8c:
88:61:8f:f4:5a:df:5e:c3:66:ff:f6:07:b4:9f:21:
bb:d4:5e:85:fd:37:d1:9e:bc:74:b5:8e:e9:9a:51:
68:9f:6a:55:25:2b:d6:94:c7:97:b1:81:34:16:62:
72:8f:78:35:d9:61:28:af:e4:21:da:32:9b:aa:a0:
7b:39:2a:f1:fe:a4:b7:88:a6:6e:81:07:36:a0:34:
94:26:2e:95:55:29:5b:f1:b4:20:55:ac:a5:64:f0:
20:ca:ee:08:55:47:a1:e2:e8:e0:39:93:0d:99:b6:
84:51:52:ea:1e:ef:5d:7b:a0:a7:39:01:61:02:09:
57:c2:4e:81:2d:98:22:5c:51:42:c3:5d:67:55:9c:
83:3e:c1:87:d2:59:a5:7c:c1:d0:b6:64:01:5c:3a:
1c:25:e2:74:4c:5c:6f:b5:5d:f7:37:65:f9:31:51:
05:f5:d3:ba:de:d6:c5:ef:51:58:a1:76:f0:2d:9c:
48:3b:e7:e5:d9:4a:e1:1c:73:05:e0:26:a2:ca:69:
6f:dd:50:47:12:b8:f0:bd:e4:f1:89:f0:23:64:56:
da:dd:7e:5d:36:7a:40:d5:75:b1:60:a3:f9:6c:99:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:5F:83:C8:41:50:E3:F8:37:2D:2C:A6:96:60:D6:1A:58:56:FA
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7c:fd:ca:60:21:22:20:a5:d7:ec:a6:05:93:e1:77:80:c1:
c7:04:88:90:b6:13:9d:32:e3:65:6a:4f:31:70:ca:88:e0:a6:
b2:4a:ca:46:ba:34:fa:76:79:0e:51:a2:c3:41:63:48:ec:19:
fb:47:3f:cc:ed:90:27:08:c1:3d:0c:e9:6c:2e:3e:ed:81:b5:
6f:16:6d:4b:b5:5c:1f:ed:7d:de:6c:f1:fe:79:64:33:7a:77:
db:b6:2b:85:91:c6:ea:64:ac:d3:f0:4b:af:df:be:63:d7:be:
7b:24:74:76:f0:f0:e0:a5:43:b6:62:d2:62:c9:ec:14:10:1f:
84:ae:22:15:03:16:ed:69:d8:56:d9:15:f5:67:d8:69:7b:00:
47:1a:77:b3:53:0c:81:7d:5f:67:b7:f2:f5:77:97:67:a4:2c:
95:75:2c:4d:a7:4d:39:94:a2:b8:64:8a:93:fc:92:3c:f8:82:
11:05:72:85:ec:ae:07:35:eb:63:41:ca:23:8d:87:58:e2:51:
70:ba:1d:56:6f:f7:d1:4d:7d:92:89:be:10:4a:ea:a5:35:53:
95:ac:e2:cd:7e:e1:c2:86:6b:d6:cb:e6:66:fc:61:eb:d3:02:
02:f9:e3:e0:d4:ca:e2:c4:34:57:07:e9:73:b1:7f:8b:ed:a7:
1e:24:9b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:52 2026 by rpki-client